{"id":100487,"date":"2021-06-09T22:22:34","date_gmt":"2021-06-09T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/alpaca-novaya-tehnika-mitm-atak-na-https"},"modified":"2021-06-09T22:22:34","modified_gmt":"2021-06-09T20:22:37","slug":"alpaca-novaya-tehnika-mitm-atak-na-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","title":{"rendered":"ALPACA \u2013 jauna MITM uzbrukumu tehnika uz HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u0113tnieku grupa no vair\u0101k\u0101m V\u0101cijas universit\u0101t\u0113m ir izstr\u0101d\u0101jusi jaunu MITM uzbrukuma metodi uz HTTPS, kas \u013cauj ieg\u016bt s\u012bkdatnes ar sesijas identifikatoriem un citiem konfidenci\u0101liem datiem, k\u0101 ar\u012b pan\u0101kt, ka tiek izpild\u012bts nejau\u0161s JavaScript kods cita vietne kontekst\u0101. Uzbrukums ieguvis nosaukumu ALPACA un to var izmantot TLS serveriem, kas \u012bsteno da\u017e\u0101dus pielietojuma protokolus (HTTPS, SFTP, SMTP, IMAP, POP3), ta\u010du izmanto kop\u012bgus TLS sertifik\u0101tus.      <\/p>\n<p>Uzbrukuma b\u016bt\u012bba ir t\u0101da, ka, kontrol\u0113jot t\u012bkla v\u0101rteju vai bezvadu piek\u013cuves punktu, uzbruc\u0113js var novirz\u012bt web satiksmi uz citu t\u012bkla portu un organiz\u0113t savienojuma izveidi ar FTP vai pasta serveriem, kas atbalsta TLS \u0161ifr\u0113\u0161anu un izmanto kop\u012bgu ar HTTP serveri TLS sertifik\u0101tu, un lietot\u0101ja p\u0101rl\u016bks uzskat\u012bs, ka savienojums ir izveidots ar piepras\u012bto HTTP serveri. T\u0101 k\u0101 TLS protokols ir univers\u0101ls un nav piesaist\u012bts pielietojuma protokoliem, \u0161ifr\u0113t\u0101 savienojuma izveide visiem pakalpojumiem ir identiska, un k\u013c\u016bda nos\u016bt\u012btaj\u0101 piepras\u012bjum\u0101 citam pakalpojumam var tikt noteikta tikai p\u0113c \u0161ifr\u0113t\u0101 sesija izveides, apstr\u0101d\u0101jot nos\u016bt\u012bt\u0101 piepras\u012bjuma komandas.     <\/p>\n<p>Attiec\u012bgi, ja, piem\u0113ram, novirz\u012btu lietot\u0101ja savienojumu, kas s\u0101kotn\u0113ji adres\u0113ts uz HTTPS, uz pasta serveri, kur\u0101 tiek izmantots kop\u012bgs ar HTTPS serveri sertifik\u0101ts, TLS savienojums tiks veiksm\u012bgi izveidots, ta\u010du pasta serveris nevar\u0113s apstr\u0101d\u0101t nos\u016bt\u012bt\u0101s HTTP komandas un atgriez\u012bs atbildi ar k\u013c\u016bdas kodu. \u0160o atbildi p\u0101rl\u016bks apstr\u0101d\u0101s k\u0101 piepras\u012bt\u0101 vietne atbildi, nos\u016bt\u012btu pareizi izveidot\u0101 \u0161ifr\u0113t\u0101 sazi\u0146as kan\u0101l\u0101.        <\/p>\n<p>Ieteikti tr\u012bs uzbrukuma varianti:   <\/p>\n<ul>\n<li class=\"l\"> \u201eUpload\u201c cookie izvilk\u0161anai ar autentifik\u0101cijas parametriem. \u0160\u012b metode ir piem\u0113rojama, ja FTP serveris, kuru aptver TLS sertifik\u0101ts, \u013cauj aug\u0161upiel\u0101d\u0113t un izvilkt savus datus. \u0160aj\u0101 uzbrukuma variant\u0101 uzbruc\u0113js var saglab\u0101t s\u0101kotn\u0113j\u0101 lietot\u0101ja HTTP piepras\u012bjuma da\u013cas, piem\u0113ram, s\u012bkdat\u0146u galvenes saturu, ja FTP serveris interpret\u0113 piepras\u012bjumu k\u0101 failu saglab\u0101\u0161anai vai piln\u012bb\u0101 re\u0123istr\u0113 ien\u0101ko\u0161os piepras\u012bjumus. Lai uzbrukums b\u016btu veiksm\u012bgs, uzbruc\u0113jam k\u0101d\u0101 veid\u0101 j\u0101izvelk saglab\u0101tais saturs. Uzbrukums ir piem\u0113rojams Proftpd, Microsoft IIS, vsftpd, filezilla un serv-u.\n<li class=\"l\"> \u201eDownload\u201c starpdom\u0113nu skriptu izpildei (XSS). \u0160\u012b metode noz\u012bm\u0113, ka uzbruc\u0113js rezult\u0101t\u0101 var ievietot datus pakalpojum\u0101, kas izmanto kop\u012bgu <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/ssl-sertifikat\/\"   title=\"TLS sertifik\u0101ts\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"943\">TLS sertifik\u0101ts<\/a>, kurus p\u0113c tam var izsniegt lietot\u0101ja piepras\u012bjumam. Uzbrukums ir piem\u0113rojams iepriek\u0161min\u0113tajiem FTP serveriem, IMAP serveriem un POP3 serveriem (courier, cyrus, kerio-connect un zimbra).\n<li class=\"l\"> \u201eReflection\u201c JavaScript izpild\u012b\u0161anai cita vietn\u0113. \u0160\u012b metode ir balst\u012bta uz da\u013cas piepras\u012bjuma atgrie\u0161anu klientam, kur\u0101 ir nos\u016bt\u012bts uzbruc\u0113ja JavaScript kods. Uzbrukums ir piem\u0113rojams iepriek\u0161 min\u0113tajiem FTP serveriem, IMAP serveriem cyrus, kerio-connect un zimbra, k\u0101 ar\u012b SMTP serverim sendmail.    <\/ul>\n<p>      <center><img decoding=\"async\" alt=\"ALPACA - jauna MITM uzbrukuma tehnika uz HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/95266e6e295fe69ffbcd79d55086425f.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>Piem\u0113ram, kad lietot\u0101js atver uzbruc\u0113ja kontrol\u0113tu lapu, no \u0161\u012bs lapas var tikt uzs\u0101kts resursa piepras\u012bjums no vietnes, kur\u0101 lietot\u0101jam ir akt\u012bva konts (piem\u0113ram, bank.com). MITM uzbrukuma laik\u0101 \u0161o piepras\u012bjumu, kas adres\u0113ts web vietnei bank.com, var novirz\u012bt uz e-pasta serveri, kur\u0101 tiek izmantots kop\u012bgs TLS sertifik\u0101ts ar bank.com. T\u0101 k\u0101 e-pasta serveris nebeidz sesiju p\u0113c pirm\u0101s k\u013c\u016bdas, pal\u012bgieraksti un komandas, piem\u0113ram, \u201ePOST \/ HTTP\/1.1\u201c un \u201eHost:\u201c, tiks apstr\u0101d\u0101tas k\u0101 nezin\u0101mas komandas (e-pasta serveris atgriez\u012bs katram ierakstam \u201e500 neatz\u012bta komanda\u201c).     <\/p>\n<p>Pasta serveris nesaprot HTTP protokola \u012bpatn\u012bbas, t\u0101p\u0113c tam tiek apstr\u0101d\u0101ti pal\u012bgsertifik\u0101ti un POST piepras\u012bjuma datu bloks vien\u0101di, t\u0101p\u0113c POST piepras\u012bjuma \u0137ermen\u012b var nor\u0101d\u012bt rindu ar komandu pasta serverim. Piem\u0113ram, var nodot: MAIL FROM:  uz ko pasta serveris atgriez\u012bs k\u013c\u016bdas zi\u0146ojumu 501 : malformed address: alert(1); may not follow      <\/p>\n<p>\u0160is atbildi sa\u0146ems lietot\u0101ja p\u0101rl\u016bks, kur\u0161 izpild\u012bs JavaScript kodu bank.com vietnes kontekst\u0101, nevis uzbruc\u0113ja s\u0101kotn\u0113ji atv\u0113rtaj\u0101 vietn\u0113, jo atbilde sa\u0146emta pareiz\u0101 TLS sesij\u0101, kuras sertifik\u0101ts apstiprin\u0101ja bank.com atbildes autentiskumu.     <center><img decoding=\"async\" alt=\"ALPACA - jauna MITM uzbrukuma tehnika uz HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/a4406c142f7592950a34b82cf608d07a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Glob\u0101l\u0101s t\u012bkla sken\u0113\u0161ana par\u0101d\u012bja, ka visp\u0101r vietn\u0113m ir apm\u0113ram 1,4 miljoni t\u012bmek\u013ca serveru, kuri ir pak\u013cauti uzbrukumam, izmantojot da\u017e\u0101du protokolu sajauk\u0161anu. Re\u0101la uzbrukuma iesp\u0113jam\u012bba ir identific\u0113ta 119 t\u016bksto\u0161os t\u012bmek\u013ca serveru, kuriem ir citi atbalsto\u0161i TLS serveri, kas balst\u012bti uz citiem pielietojuma protokoliem.        <\/p>\n<p>Ekspluat\u0101cijas piem\u0113ri ir sagatavoti ftp serveriem, piem\u0113ram, pureftpd, proftpd, microsoft-ftp, vsftpd, filezilla un serv-u, IMAP un POP3 serveriem dovecot, courier, exchange, cyrus, kerio-connect un zimbra, SMTP serveriem postfix, exim, sendmail, mailenable, mdaemon un opensmtpd. P\u0113tnieki izp\u0113t\u012bju\u0161i uzbrukuma iesp\u0113ju tikai saist\u012bb\u0101 ar FTP, SMTP, IMAP un POP3 serveriem, vienlaikus neizsl\u0113dzot, ka probl\u0113ma var par\u0101d\u012bties ar\u012b citiem pielietojuma protokoliem, kas izmanto TLS.     <center><img decoding=\"async\" alt=\"ALPACA - jauna MITM uzbrukuma tehnika uz HTTPS\" src=\"\/wp-content\/uploads\/2021\/06\/91a1a7bf6caf28311bf927be85adb4ef.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Lai blo\u0137\u0113tu uzbrukumu, ieteikts izmantot ALPN (Application Layer Protocol Negotiation) papla\u0161in\u0101jumu, lai norun\u0101tu TLS sesiju, \u0146emot v\u0113r\u0101 pielietojuma protokolu, un SNI (Server Name Indication) papla\u0161in\u0101jumu, lai sasaist\u012btu ar saimniekkomp\u0101nijas v\u0101rdu, ja tiek izmantoti TLS sertifik\u0101ti, kas aptver vair\u0101kus. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/domain\/\"   title=\"dom\u0113na nosaukumu\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"909\">dom\u0113na nosaukumu<\/a>Pielietojumu pus\u0113 ieteikts ierobe\u017eot k\u013c\u016bdu skaita limitu komandu apstr\u0101d\u0113, p\u0113c kura savienojums tiks p\u0101rtraukts. Procesa izstr\u0101de, lai blo\u0137\u0113tu uzbrukumu, s\u0101k\u0101s jau pag\u0101ju\u0161\u0101 gada oktobr\u012b. L\u012bdz\u012bgas aizsardz\u012bbas pas\u0101kumi jau ieviesti Nginx 1.21.0 (mail proxy), Vsftpd 3.0.4, Courier 5.1.0, Sendmail, FileZilla, crypto\/tls (Go) un Internet Explorer.<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55307\">opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ALPACA \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043a TLS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u043c \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (HTTPS, SFTP, SMTP, IMAP, POP3), \u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":100488,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-06-09T20:22:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ALPACA \u2014 jauna MITM uzbrukuma tehnika uz HTTPS | ProHoster","description":"P\u0113tnieku grupa no vair\u0101kiem V\u0101cijas univerist\u0101t\u0113m izstr\u0101d\u0101jusi jaunu MITM uzbrukuma metodi uz HTTPS, kas \u013cauj ieg\u016bt Cookies ar sesiju identifikatoriem un citiem konfidenci\u0101liem datiem, k\u0101 ar\u012b pan\u0101kt.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ALPACA \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 MITM-\u0430\u0442\u0430\u043a \u043d\u0430 HTTPS | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 HTTPS, \u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c Cookie \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/alpaca-novaya-tehnika-mitm-atak-na-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-09T20:22:37+00:00","article:modified_time":"2021-06-09T20:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100487","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-09 20:29:01","updated":"2026-02-08 21:02:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/100487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=100487"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/100487\/revisions"}],"predecessor-version":[{"id":158135,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/100487\/revisions\/158135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/100488"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=100487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=100487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=100487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}